Instagram users have been asking for a way to view all the data the company has on them, but this may be more than they were hoping for. The new Download Your Data tool that allows users to receive that information may have left some users’ passwords exposed.
When using the new feature, some Instagram users’ passwords were displayed in the URL, which was then also stored on Facebook’s servers—a bigger issue for those using a shared computer or compromised network, according to The Information. Facebook already notified users who were affected.
The tool has since been updated and the problem should no longer occur. Those Instagram users affected are encouraged to change their passwords and clear their browser history.
But it’s still a troubling update, as Instagram and parent company Facebook fight back against a seemingly unending stream of scandal and security breaches.
Fortune reached out to Instagram for comment, but did not receive an immediate reply.